Product:
Microsoft Edge
Summary
User interface misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network. This vulnerability can lead to users being misled by false information presented in the UI. Attackers can exploit this flaw to gain unauthorized access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-62224 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access and can then manipulate the user interface to present misleading information. This can be done over a network, allowing the attacker to spoof critical information that users rely on, potentially leading to unauthorized actions or data exposure.
Affected Products
- Microsoft Edge for Android: Vulnerable to UI misrepresentation, allowing spoofing attacks.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Edge and apply any available security updates. Additionally, users should be cautious of the information presented in the UI and verify critical data through trusted sources.